summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* spice-protocol: upgrade to 1.14.3Ross Burton2022-02-032-28/+19
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: use precise BSD licenseRoss Burton2022-02-031-1/+1
| | | | | | | This package is BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: set correct LICENSERoss Burton2022-02-031-1/+1
| | | | | | | Remove BSD, as this package is entirely LGPL2+. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpslice: upgrade 1.2a3 -> 1.5Yi Zhao2022-02-034-126/+25
| | | | | | | | | * Update SRC_URI to official download page * Drop patches which had been fixed upstream. * Add UPSTREAM_CHECK_REGEX Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: upgrade 4.99.0 -> 4.99.1Yi Zhao2022-02-032-46/+5
| | | | | | | | | * Skip aclocal in do_configure * Inherit pkgconfig then we can drop 0001-aclocal.m4-Skip-checking-for-pcap-config.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.12 -> 1.34.0wangmy2022-01-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= * initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6". * core: better handle sd-resolved errors when resolving hostnames. * nmcli: fix import WireGuard profile with DNS domain and address family disabled. * ndisc: send router solicitations before expiry. * policy: send earlier the ip configs to the DNS manager. * core: support linking with LLD 13. * wireguard: importing wg-quick configuration files with nmcli no longer sets a negative, exclusive "dns-priority". This plays better with common split DNS setups that use systemd-resolved. Adjust the "dns-priority" to your liking after import yourself. * NetworkManager no longer listens for netlink events for traffic control objects (qdiscs and filters). * core: add internal nm-priv-helper service for separating privileges and have a way to drop capabilities from NetworkManager daemon. * bond: add support for setting queue-id of bond port. * dns: support configuring DNS over TLS (DoT) with systemd-resolved. * nmtui: add support for WireGuard profiles. * nmcli: add aliases `nmcli device up|down` beside connect|disconnect. * conscious language: Deprecate 'Device.Slaves' D-Bus property in favor of new 'Device.Ports' property. Depracate 'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()' in libnm. * nmcli: invoking nmcli command without arguments will now show 'default' instead of null address in route4 or route6 section. The following changes were backported to 1.32.x releases between 1.32.0 and 1.32.12 are also present in NetworkManager-1.34: - 1.32.12: * Fix wrong order of addresses when restarting NetworkManager. * Preserve the IPv6 ff00::/8 route added by kernel in the local table, necessary for multicast communication. * Fix emitting the signal for changed metered status of devices. * Fix applying the ethtool autonegotiation and speed settings. * initrd: fix crash parsing plain '=' without key. * cloud-setup: use suppress_prefixlength rule to honor non-default-routes in the main table. - 1.32.10: * core: fix the order of IPv6 addresses changing on service restart. * initrd: add command line option to configure link autonegotiation and speed. * ifcfg-rh: fix crash when parsing invalid DNS address. * ifcfg-rh: extend ifup/ifdown scripts to work with connection profile names. * udev: also react to "move" (and "change") udev actions in our rules. - 1.32.8: * firewalld: configure zones on "Reloaded" signal. * core: fix wrong MTU for bridge interfaces. * cloud-setup: fix gateway address for Aliyun cloud. - 1.32.6: * core: fix adding stale local routes when address changes. * initrd: tag generated profiles with origin in user data. * core: introduce "allowed-connections" option to disallow profiles on a device. This allows to filter out profiles that originate from initrd. * core: introduce "keep-configuration" device option to forcefully activate a profile on start. * dhcp: handle filename/bootfile_name DHCP option and write it to device state file for initrd/kickstart. * initrd: add "ib.pkey=" command line option - 1.32.4: * core: remove stale entries from "seen-bssids" and "timestamp" files in "/var/lib/NetworkManager". * bond: support the peer_notif_delay option. * core: add ipv[46].required-timeout option to wait for IP configuration while activating. * core: send ARP announcements when there is carrier. * core: start DHCPv6 when a prefix delegation is needed for shared mode. * firewall: fix nftables backend to create "ip" table for IPv4 only. * initrd: set required-timeout of 20 seconds for default IPv4 configuration to opportunistically wait for IPv4. * ifcfg: log warning about invalid keys in ifcfg files. * ifcfg: reject non-UTF-8 from ifcfg files. * nmcli: show DNS SEARCH field in device information. * cloud-setup: add support for Aliyun cloud. - 1.32.2: * hostname: prefer IPv4 addresses for reverse DNS lookup. * dhcp: ignore unauthenticated FORCERENEW messages with internal, systemd-based DHCPv4 plugin (CVE-2020-13529). This plugin is not used, unless the undocumented dhcp=systemd option was set. * cloud-setup: preserve IP addresses, routes and rules from currently active connection profile. * Various bugfixes and performance improvements. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mtr: upgrade 0.94 -> 0.95wangmy2022-01-192-72/+2
| | | | | | | | 0001-Fix-a-lot-of-Werror-format-security-errors-in-printw.patch removed since it is included in 0.95. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 36.0 -> 38.0wangmy2022-01-181-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========= Merge pull request #1085 from rleon/upgrade-fc35 build: Update to clang 13 build: Update to Fedora 35 ci: Convert deprecated distutils Merge pull request #1084 from jgunthorpe/kernel-headers Update kernel headers build: Fix distutils deprecation warning during vuild pyverbs: Prepare code to Cython 3 mlx5: Change pthread_yield to sched_yield Merge pull request #1083 from Wenpeng-Liang/fix_db Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.6.3 -> 3.6.4Yi Zhao2022-01-1812-88/+90
| | | | | | | Refresh patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: Add missing header stdc-predef.hKhem Raj2022-01-182-0/+32
| | | | | | | | | | | | musl highlights this problem Fixes | ../../tnftp-20210827/libedit/chartype.h:47:3: error: wchar_t must store ISO 10646 characters | #error wchar_t must store ISO 10646 characters | ^ | 1 error generated. Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Yi Zhao <yi.zhao@windriver.com>
* tnftp: upgrade 20151004 -> 20210827Yi Zhao2022-01-182-46/+3
| | | | | | | | * License-Update: Update copyright years * Drop tnftp-autotools.patch as the issue had been fixed upstream Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.1.4. -> 2.1.5Yi Zhao2022-01-182-1/+45
| | | | | | | Backport a patch to fix the build error. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bridge-utils: upgrade 1.7 -> 1.7.1Yi Zhao2022-01-185-15/+165
| | | | | | | | | | | * Update SRC_URI to official git repo per [1] * Refresh patches * Backport a patch to fix build error with musl [1] https://wiki.linuxfoundation.org/networking/bridge Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-queue: upgrade 1.0.3 -> 1.0.5Yi Zhao2022-01-182-1229/+1
| | | | | | | | Drop 0001-libnetfilter-queue-Declare-the-define-visivility-attribute-together.patch as the clang build issue had been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: upgrade 7.11 -> 7.15Yi Zhao2022-01-181-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.0 -> 1.0.1Yi Zhao2022-01-181-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scapy: remove redundant pycrypto RDEPENDSRoss Burton2022-01-181-1/+1
| | | | | | | | Scapy moved from pycrypto to cryptography in 2.4.0 (commit c24298b). Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
* ntpsec: Add glibc-2.34/kernel-5.14 seccomp fixesAlex Kiernan2022-01-054-0/+110
| | | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.0.0 -> 5.1.0wangmy2022-01-051-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 3.0 -> 3.4wangmy2022-01-052-9/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | refresh 0001-use-pkg-config-for-gcrypt-instead.patch License-Update: Url changed from "https://www.gnu.org/philosophy/why-not-lgpl.html" to "https://www.gnu.org/licenses/why-not-lgpl.html" Changelog: ========= New features ---------------- core: add support of static arrays in hdata core: add command /toggle api: add parameters pointers, extra_vars and options in function hdata_search api: add user variables in evaluation of expressions with "define:name,value" api: add IRC message parameters "param1" to "paramN" and "num_params" in output of irc_message_parse irc: allow quotes around IRC message in command /server fakerecv trigger: hide key and password in command "/msg nickserv setpass nick key password" trigger: add support of option "-server" when hiding passwords in command /msg nickserv register Bug fixes --------------- core: fix memory leak in evaluated expression "split:number,seps,flags,xxx" when multiple "strip_items" are given core: fix random integer number with large range in evaluation of expressions on GNU/Hurd core: fix access to integer/long/time arrays in hdata api: fix search of option when the section is not given in functions config_search_option and config_search_section_option irc: fix join of channels with long name (issue #1717) irc: fix parsing of parameters in all IRC messages (issue #1666) irc: fix parsing of CAP message when there is no prefix (issue #1707) irc: fix parsing of TAGMSG message when there is a colon before the channel Documentation --------------- doc: remove tester's guide doc: add dark theme (automatic, following browser/desktop settings) doc: make build reproducible doc: disable web fonts doc: switch from prettify to pygments for syntax highlighting Tests -------------- core: add build with CMake and Ninja in CI core: add build on macOS 11 in CI Build ------------ ruby: add detection of Ruby 3.0 (issue #1721, issue #1605) core: add targets "changelog" and "rn" to build HTML version of ChangeLog and release notes (CMake build only) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: update to latest stable 3.4.11Armin Kuster2022-01-052-10/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For more infromation, see: https://www.wireshark.org/docs/relnotes/wireshark-3.4.11.html refresh 0004-lemon-Remove-line-directives.patch Includes CVEs: 3.4.11: wnpa-sec-2021-16 Gryphon dissector crash. Issue 17737. CVE-2021-4186. wnpa-sec-2021-17 RTMPT dissector infinite loop. Issue 17745. CVE-2021-4185. wnpa-sec-2021-18 BitTorrent DHT dissector infinite loop. Issue 17754. CVE-2021-4184. wnpa-sec-2021-20 RFC 7468 file parser infinite loop. Issue 17801. CVE-2021-4182. wnpa-sec-2021-21 Sysdig Event dissector crash. CVE-2021-4181. 3.4.10: wnpa-sec-2021-07 Bluetooth DHT dissector crash. Issue 17651. CVE-2021-39929. wnpa-sec-2021-08 Bluetooth HCI_ISO dissector crash. Issue 17649. CVE-2021-39926. wnpa-sec-2021-09 Bluetooth SDP dissector crash. Issue 17635. CVE-2021-39925. wnpa-sec-2021-10 Bluetooth DHT dissector large loop. Issue 17677. CVE-2021-39924. wnpa-sec-2021-11 PNRP dissector large loop. Issue 17684. wnpa-sec-2021-12 C12.22 dissector crash. Issue 17636. CVE-2021-39922. wnpa-sec-2021-13 IEEE 802.11 dissector crash. Issue 17704. CVE-2021-39928. wnpa-sec-2021-14 Modbus dissector crash. Issue 17703. CVE-2021-39921. wnpa-sec-2021-15 IPPUSB dissector crash. Issue 17705. CVE-2021-39920. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: upgrade 2.2.1 -> 2.2.3Andreas Müller2022-01-051-1/+1
| | | | | | | | | | | | | | | | 2.2.3: Bugs fixed Recent connections disabled after suspend and resume Service authorization notifications did not respond Passkeys did not get displayed 2.2.2: Bugs fixed Issues with power level bars Error message in blueman-mechanism Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: remove redundant DEPENDSArmin Kuster2021-12-271-1/+1
| | | | | | | drop openssl and gmp from DEPENDS, covered in PACKAGECONFIG Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add integrity optionsArmin Kuster2021-12-271-0/+36
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add tpm PACKAGECONFIGArmin Kuster2021-12-271-0/+5
| | | | | | | migrate meta-tpm strongswan tweaks to meta-networking Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: provide PACKAGECONFIG for cureve25519Armin Kuster2021-12-271-2/+2
| | | | | | | | Not everyone wants this to be installed by default. Enable to remove cureve25519 is someone wants to. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xl2tpd: update to 1.3.16Oleksandr Kravchuk2021-12-231-1/+3
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.31 -> 2.0.32Yi Zhao2021-12-211-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.10 -> 4.14.11zhengruoqin2021-12-211-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ There have been a few regressions in the security release 4.14.10: o CVE-2020-25717: A user on the domain can become root on domain members. https://www.samba.org/samba/security/CVE-2020-25717.html PLEASE [RE-]READ! The instructions have been updated and some workarounds initially adviced for 4.14.10 are no longer required and should be reverted in most cases. o BUG-14902: User with multiple spaces (eg Fred&lt;space&gt;&lt;space&gt;Nurk) become un-deletable. While this release should fix this bug, it is adviced to have a look at the bug report for more detailed information, see https://bugzilla.samba.org/show_bug.cgi?id=14902. Changes since 4.14.10 --------------------- * BUG 14878: Recursive directory delete with veto files is broken. * BUG 14879: A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory. * BUG 14656: Spaces incorrectly collapsed in ldb attributes. * BUG 14694: Ensure that the LDB request has not timed out during filter processing as the LDAP server MaxQueryDuration is otherwise not honoured. * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token. * BUG 14902: User with multiple spaces (eg Fred&lt;space&gt;&lt;space&gt;Nurk) become un- deletable. * BUG 14127: Avoid storing NTTIME_THAW (-2) as value on disk * BUG 14922: Kerberos authentication on standalone server in MIT realm broken. * BUG 14923: Segmentation fault when joining the domain. * BUG 14903: Support for ROLE_IPA_DC is incomplete. * BUG 14788: Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send. * BUG 14899: winbindd doesn&apos;t start when &quot;allow trusted domains&quot; is off. * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token. * BUG 14694: Ensure that the LDB request has not timed out during filter processing as the LDAP server MaxQueryDuration is otherwise not honoured. * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.6.2 -> 3.6.3Yi Zhao2021-12-211-1/+1
| | | | | | | | Release Notes: http://www.postfix.org/announcements/postfix-3.6.3.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.4 -> 2.5.5zhengruoqin2021-12-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Fix error in example firewall.sh script configure: remove useless -Wno-* from default CFLAGS Add argv_insert_head__empty_argv__head_only to argv tests Move deprecation of SWEET32/64bit block size ciphers to 2.7 Include --push-remove in the output of --help. Move '--push-peer-info' documentation from 'server' to 'client options' add test case(s) to notice 'openvpn --show-cipher' crashing BUILD: enable CFG and Spectre mitigation for MSVC Fix loading PKCS12 files on Windows msvc: fix product version display msvc: add missing header to project file config-msvc.h: fix OpenSSL-related defines contrib/vcpkg-ports: remove openssl port GitHub Actions: use latest working lukka/run-vcpkg Use network address for emulated DHCP server as a default Load OpenSSL config on Windows from trusted location ring_buffer.h: fix GCC warning about unused function ssh_openssl.h: remove unused declaration vcpkg/pkcs11-helper: compatibility with latest vcpkg config-msvc.h: indicate key material export support Don't use BF-CBC in unit tests if we don't have it Define have_blowfish variable in ncp unit tests doc link-options.rst: Use free open-source dynamic-DNS provider URL Fix some more wrong defines in config-msvc.h Ensure the current common_name is in the environment for scripts Require EC key support in Windows builds resolvconf fails with -p Update IRC information in CONTRIBUTING.rst doc/man (vpn-network-options): fix foreign_option_{n} typo README.down-root: Fix plugin module name Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.1 -> 4.2zhengruoqin2021-12-212-13/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | refresh arm_eabi.patch Changelog: ========== Enhancements -Add support for NTPv4 extension field improving synchronisation stability and resolution of root delay and dispersion (experimental) -Add support for NTP over PTP (experimental) -Add support for AES-CMAC and hash functions in GnuTLS -Improve server interleaved mode to be more reliable and support multiple clients behind NAT -Update seccomp filter -Add statistics about interleaved mode to serverstats report Bug fixes -Fix RTC support with 64-bit time_t on 32-bit Linux -Fix seccomp filter to work correctly with bind*device directives -Suppress kernel adjustments of system clock (dosynctodr) on illumos Other changes -Switch Solaris support to illumos Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: add ptestTrevor Gamblin2021-12-213-1/+63
| | | | | Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: install dbus service configurationJeremy Kerr2021-12-211-0/+8
| | | | | | | | mctpd ships with an example dbus service configuration, so install in the dbus system configuration dir. Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: upgrade to v1.0Jeremy Kerr2021-12-212-89/+3
| | | | | | | | We have a tag for 1.0, now: better handling of local stack configuration at runtime, and the 5.15 kernel header change has been integrated. Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: fix rebuildsRoss Burton2021-12-151-3/+3
| | | | | | | | | | | | | | | dhcp-relay needs a fresh tarball of bind unpacked in ${S}, but this is done by fetching the tarball to ${WORKDIR}, then in do_configure moving it to ${S} and unpacking it. If dhcp-relay is re-configured, the tarball no longer exists in ${WORKDIR} so this fails. Copy instead of moving so rebuilds work. Also don't rename the downloaded file to just bind.tar.gz as that can cause probems if the version changes. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.18.1 -> 2.9.19wangmy2021-12-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | changelog: ========= * src/snort.c : Fixed an issue where verdict will be applied onto next session when timeout occurs in some scenarios. * rc/file-process/file_service.c : Removed an excessively flooding log. * src/dynamic-preprocessors/modbus/modbus_decode.c : Fixed possible integer overflow. * src/fpcreate.c : Added fix to GCC compiled snort to use AC-BNFA-Q search-method when Intel-cpm is enabled. * src/generators.h src/preprocessors/Stream6/snort_stream_tcp.c : Added fix to not to drop packets when window size is 0 by TCP normalizer and Added new alert with GID 129 and SID 21 when such packets are seen. * src/dynamic-preprocessors/appid/detector_plugins/detector_imap.c src/dynamic-preprocessors/appid/detector_plugins/detector_pop3.c : Added support for Appid to detect login success and failure for IMAP and POP3 protocols. * src/dynamic-preprocessors/reputation/reputation_config.c src/dynamic-preprocessors/reputation/spp_reputation.c src/dynamic-preprocessors/reputation/spp_reputation.h src/pkt_tracer.c src/snort.c src/util.c : Fixed terminology to be bias-free in log/error messages. * src/snort.c : Fixed a potential race condition. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: remove obsolete support for renamed libtoolRoss Burton2021-12-131-3/+1
| | | | | | | | libtool is now longer renamed to ${host}-libtool, so remove the changes to support this. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: remove obsolete support for renamed libtoolRoss Burton2021-12-131-2/+1
| | | | | | | | libtool is now longer renamed to ${host}-libtool, so remove the changes to support this. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: use precise BSD licenseRoss Burton2021-12-131-1/+1
| | | | | | | "BSD" is vague, this license is BSD 3-clause BSD. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ldap: update to 3.4.0Oleksandr Kravchuk2021-12-131-8/+5
| | | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
* bmon: fix PVOleksandr Kravchuk2021-12-101-0/+0
| | | | | | | The commit hash is pointing out to the tag v4.0, not 2.1.0. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: Don't depends on dlt-daemon unconditionallyAndrei Gherzan2021-12-091-1/+1
| | | | | | | | This dependency is already handled through a PACKAGECONFIG so there is no need for it in DEPENDS anymore. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntpsec: Disable seccomp on riscv32Khem Raj2021-12-021-1/+1
| | | | | | rv32 does not have seccomp support yet. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking,meta-python: Fix README for yocto check layerKhem Raj2021-12-021-0/+3
| | | | | | This ensures that Maintainer entries are as expected Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.0 -> 1.2.1Trevor Gamblin2021-12-012-8/+23
| | | | | | | | | Also fix patch contributor name in the process of reworking it to apply on the new 1.2.1 release (I had accidentally modified it when reworking it previously). Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pure-ftpd: upgrade 1.0.49 -> 1.0.50wangmy2021-11-291-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | License-Update: year updated to 2021. Changelog ========== This version fixes some really old issues, the most significant one being excessive memory use for large memory listings. When virtual quotas were used, transfers were not aborted after the limit was reached; files were only removed at the end of a transfer. That should now be fixed. Support for MD5, SHA1 and the MySQL PASSWORD() function were removed for password hashing. You should now use scrypt, argon2 or the system crypt(3) function. The server used to reject class E reserved network ranges. People reported that Linux containers may use them, so this is now accepted. Finally, it is now possible to recursively include additional files in a configuration file, with the new Include directive. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: update cross-answers filesYi Zhao2021-11-2521-253/+80
| | | | | | | | Replace the configure tests UNKNOWN answers with the correct answers. Then drop the related patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: add pyldb to rdepends for samba-python3Yi Zhao2021-11-251-1/+1
| | | | | | | | | | | | | | | Fixes: $ python3 >>> import samba Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib64/python3.10/site-packages/samba/__init__.py", line 28, in <module> import ldb ModuleNotFoundError: No module named 'ldb' >>> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: fix pyext_PATTERN for cross compilationYi Zhao2021-11-252-0/+64
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The pyext_PATTERN will add native arch as suffix when cross compiling. For example, on qemuarm64, it is expanded to: pyext_PATTERN ='%s.cpython-310-x86_64-linux-gnu.so' which will result in the incorrect library name. root@qemuarm64:~# find /usr/lib -name \*cpython\* /usr/lib/pkgconfig/samba-policy.cpython-310-x86_64-linux-gnu.pc /usr/lib/libsamba-policy.cpython-310-x86-64-linux-gnu.so /usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-samba4.so /usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-samba4.so /usr/lib/libsamba-policy.cpython-310-x86-64-linux-gnu.so.0 /usr/lib/libsamba-policy.cpython-310-x86-64-linux-gnu.so.0.0.1 /usr/lib/python3.10/site-packages/samba/dsdb_dns.cpython-310-x86_64-linux-gnu.so /usr/lib/python3.10/site-packages/samba/dsdb.cpython-310-x86_64-linux-gnu.so /usr/lib/python3.10/site-packages/samba/xattr_tdb.cpython-310-x86_64-linux-gnu.so /usr/lib/python3.10/site-packages/samba/_ldb.cpython-310-x86_64-linux-gnu.so /usr/lib/python3.10/site-packages/samba/gensec.cpython-310-x86_64-linux-gnu.so [snip] Set pyext_PATTERN to '%s.so' to remove the suffix. After the patch: root@qemuarm64:~# find /usr/lib/ /usr/lib/pkgconfig/samba-policy.pc /usr/lib/libsamba-policy.so /usr/lib/samba/libsamba-python-samba4.so /usr/lib/samba/libsamba-net-samba4.so /usr/lib/libsamba-policy.so.0 /usr/lib/libsamba-policy.so.0.0.1 /usr/lib/python3.10/site-packages/samba/dsdb_dns.so /usr/lib/python3.10/site-packages/samba/dsdb.so /usr/lib/python3.10/site-packages/samba/xattr_tdb.so /usr/lib/python3.10/site-packages/samba/_ldb.so /usr/lib/python3.10/site-packages/samba/gensec.so [snip] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-05 09:49:44 +0000